Recent submissions

Comment · 5 years ago
Comment · 5 years ago
My favorite version of this trend remains http://alwayshttp.com because https://alwayshttp.com doesn't work since alwayshttp.com:443 doesn't connect.

On the other hand, it's possible to reach https://coffeeshopwifi.com and (with a cloudfront certificate error) https://neverssl.com which makes me wonder if something in whatever I'm using is trying to upgrade to HTTPS when I fail to reach them.

Comment · 6 years ago
Comment · 7 years ago
While returns are made more complicated by Google and Apple Pay, the card numbers aren’t single-use (which I’m not sure if you mean to imply is the case with google pay today). On both iOS and Android you can view the last few digits of the Device/Virtual Account Number.

I don’t have an Android device to test these instructions on but they seem plausible and corroborated: https://supportcentre.natwestinternational.com/Searchable/91...

When I made a return for an Apple Pay purchase at Target, they saw that the transaction was marked “Tapped” as card type and took my word for which card was correct. Who knows how long that’ll last. Where I really expect to run into problems down the line is when I try to take advantage of the insurance benefits offered by cards and can’t produce an invoice/receipt with the expected card number on it.

Comment · 7 years ago
Unfortunately (from some perspectives), this isn’t true. Each instance of a card in Apple Pay has a long term Device Account Number (DAN) that functions the same as a physical card’s number (though there is no link between the DAN and actual card number from the merchant’s perspective). The same DAN is used across every transaction. The only way to get a new one (which is pretty easy, relatively speaking) is to unload the card from Apple Pay then re-enroll.
Comment · 8 years ago
Are you saying that there are zero people that take the MARC commuter rail out of Odenton and transfer to Metro?

People that would (without Metro) have no way of getting from MARC to their DC jobs would disagree with you that Metro it doesn't reduce congestion on 295 and other congested roads that pass through Anne Arundel.

Comment · 9 years ago
Comment · 9 years ago
Five incorrect/bad fingerprint reads will require passcode.
Comment · 10 years ago
Regardless of SNI the certificate is unencrypted (until TLS 1.3).
Comment · 10 years ago
Additionally, FPGAs offer better cryptographic algorithm agility than ASICs. With an FPGA you stand a much better chance of being able to upgrade your expensive network hardware with quantum resistant algorithms.
Comment · 11 years ago
Where would that software auto-update get the decryption key from? If the user has enabled a passcode, then their passcode is used in generation of the key used to protect the disk encryption key. Even if apple did push an update, the user would still have to unlock their device post-update.
Comment · 11 years ago
Maryland (at least around Baltimore and DC, in my experience) often feels like a no-region's-land: many Southerners will claim it's the North and Northerners will claim that it's the South. Maryland definitely feels like it's where the lines blur.
Comment · 11 years ago

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton